This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/Ovzz0RD7GF2p7VIKf_ghV_fRcGE.roa File: Ovzz0RD7GF2p7VIKf_ghV_fRcGE.roa (raw, json) Hash identifier: /45NRYLd+HmDRuwgrbIYLn2hPLdpdiLaSsqNKwNq8No= Subject key identifier: 3A:FC:F3:D1:10:FB:18:5D:A9:ED:52:0A:7F:F8:21:57:F7:D1:70:61 Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740 Certificate serial: 019B77C66AE1C00817B5E94168EE2C31241A Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/Ovzz0RD7GF2p7VIKf_ghV_fRcGE.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210820 IP address blocks: 193.111.235.0/24 maxlen: 24 193.134.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6a:e1:c0:08:17:b5:e9:41:68:ee:2c:31:24:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3afcf3d110fb185da9ed520a7ff82157f7d17061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:cc:1e:bc:e6:41:0c:e2:53:85:1e:ce:f6: 47:ef:db:f9:61:d0:13:49:c2:ad:eb:69:48:ee:c5: 09:9f:a8:dc:03:90:21:5f:64:85:84:68:95:85:a9: 4a:3e:ae:f5:15:42:84:39:e3:5f:6e:83:fa:60:c2: fa:70:35:f2:f4:2c:18:6f:3c:82:cf:fc:af:dd:8f: 81:ab:d6:69:e5:95:78:66:22:c6:d7:39:e9:d6:83: b2:80:56:32:af:53:60:25:51:a6:29:53:a0:82:b8: 9b:22:a4:b3:be:94:8c:8c:8d:1e:e4:9b:28:33:b9: 3a:a3:04:31:10:9a:4c:46:2a:23:fa:53:85:57:58: 88:03:04:19:58:49:8d:a8:38:8f:4c:cb:ba:ae:4c: 4c:1b:4e:d1:76:0d:3d:10:e6:b9:ee:4f:a1:a8:ad: e8:bf:8e:c7:a2:36:77:d7:e8:af:71:87:49:3b:ef: 89:f5:6e:ae:64:d7:ae:20:58:f5:01:84:8e:90:2a: a5:51:f7:dd:c7:4f:6c:21:d1:57:b4:b2:48:06:6e: 17:d2:32:0e:07:a7:a9:b7:44:3e:91:fd:fb:1d:29: 10:c6:da:e6:0f:b3:79:16:41:21:5f:81:d2:66:3d: d9:dc:62:cd:2a:b4:24:43:43:c0:55:e4:e5:3b:59: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:F3:D1:10:FB:18:5D:A9:ED:52:0A:7F:F8:21:57:F7:D1:70:61 X509v3 Authority Key Identifier: keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/Ovzz0RD7GF2p7VIKf_ghV_fRcGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.235.0/24 193.134.101.0/24 Signature Algorithm: sha256WithRSAEncryption 41:10:f1:65:21:1e:14:e5:e6:51:3c:0a:d1:72:1a:f5:dd:9c: 3d:fe:68:a2:eb:40:27:92:f5:d9:65:1a:8b:30:c1:c0:8f:c4: f3:6e:74:38:01:dd:57:82:48:35:69:9e:57:e1:02:ae:45:7b: 8c:c2:cc:80:69:08:2d:f9:b2:1b:05:0e:16:dd:c1:5d:1d:c9: de:55:9e:68:26:65:38:49:91:cf:58:fe:16:65:82:5d:f4:88: c3:2b:21:a4:ff:ec:cc:32:01:e4:fa:95:e4:ff:13:7b:c7:c1: 1a:dc:55:64:68:fc:96:ad:8b:54:4e:db:12:06:95:10:64:fb: be:58:91:72:00:d0:39:72:d8:c6:af:0e:40:10:b1:1d:45:25: 72:9c:a4:87:7f:a8:e5:98:47:6d:c7:d6:f7:b6:47:7a:dd:c8: e7:92:2c:83:dc:e3:f4:1f:a5:77:9e:e4:14:54:1a:06:24:6a: 3d:41:1b:80:d5:30:0a:fc:b4:b9:ae:6b:79:3f:fb:a2:74:e7: db:9b:0e:e4:02:e2:12:65:a7:78:98:32:89:1b:09:8f:55:d9: 46:24:db:c6:24:9d:2b:e0:ed:06:1c:b1:2f:f5:5a:26:f4:50: af:d3:ab:f5:dd:b5:da:f2:2f:ae:3a:21:96:4c:89:1b:91:9f: 43:5b:93:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xmrhwAgXtelBaO4sMSQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjM4ZTNlODZhYjU2MWZhMGRkM2NiMDlhNzBkNjFiMmNh NDQ3NDAwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZjZjNkMTEwZmIxODVkYTllZDUyMGE3ZmY4MjE1N2Y3ZDE3MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcTMHrzmQQziU4UezvZH79v5YdAT ScKt62lI7sUJn6jcA5AhX2SFhGiVhalKPq71FUKEOeNfboP6YML6cDXy9CwYbzyC z/yv3Y+Bq9Zp5ZV4ZiLG1znp1oOygFYyr1NgJVGmKVOggribIqSzvpSMjI0e5Jso M7k6owQxEJpMRioj+lOFV1iIAwQZWEmNqDiPTMu6rkxMG07Rdg09EOa57k+hqK3o v47HojZ31+ivcYdJO++J9W6uZNeuIFj1AYSOkCqlUffdx09sIdFXtLJIBm4X0jIO B6ept0Q+kf37HSkQxtrmD7N5FkEhX4HSZj3Z3GLNKrQkQ0PAVeTlO1mqEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDr889EQ+xhdqe1SCn/4IVf30XBhMB8GA1UdIwQY MBaAFObzjj6Gq1YfoN08sJpw1hsspEdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZPT1BvYXJWaC1nM1R5d21uRFdHeXlrUjBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEt YTA0OTI1OTc1NzU0LzEvT3Z6ejBSRDdHRjJwN1ZJS2ZfZ2hWX2ZSY0dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEtYTA0OTI1OTc1NzU0 LzEvNXZPT1BvYXJWaC1nM1R5d21uRFdHeXlrUjBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW/rAwQA wYZlMA0GCSqGSIb3DQEBCwUAA4IBAQBBEPFlIR4U5eZRPArRchr13Zw9/mii60An kvXZZRqLMMHAj8TzbnQ4Ad1Xgkg1aZ5X4QKuRXuMwsyAaQgt+bIbBQ4W3cFdHcne VZ5oJmU4SZHPWP4WZYJd9IjDKyGk/+zMMgHk+pXk/xN7x8Ea3FVkaPyWrYtUTtsS BpUQZPu+WJFyANA5ctjGrw5AELEdRSVynKSHf6jlmEdtx9b3tkd63cjnkiyD3OP0 H6V3nuQUVBoGJGo9QRuA1TAK/LS5rmt5P/uidOfbmw7kAuISZad4mDKJGwmPVdlG JNvGJJ0r4O0GHLEv9Vom9FCv06v13bXa8i+uOiGWTIkbkZ9DW5Pw -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:01 2026 by rpki-client